Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/3134382e3232342e3139372e302f32342d3234203d3e20323733323631.roa
File:                     3134382e3232342e3139372e302f32342d3234203d3e20323733323631.roa (raw, json)
Hash identifier:          dTnlu8xzDZZ15dOBPam0LSAr9WaM8XXvitWeyDCMpcU=
Subject key identifier:   59:49:F7:7E:38:F5:83:23:21:79:35:D9:60:96:D0:00:3F:32:58:06
Certificate issuer:       /CN=290C0689C5A4825DBE1353374A1CF148FF4180E8
Certificate serial:       4409A99D3177EB65C9F88B99220F4080DD53A82F
Authority key identifier: 29:0C:06:89:C5:A4:82:5D:BE:13:53:37:4A:1C:F1:48:FF:41:80:E8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/3134382e3232342e3139372e302f32342d3234203d3e20323733323631.roa
Signing time:             Mon 02 Jun 2025 16:00:11 +0000
ROA not before:           Mon 02 Jun 2025 15:55:11 +0000
ROA not after:            Mon 01 Jun 2026 16:00:11 +0000
asID:                     273261
IP address blocks:        148.224.197.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 25 Jun 2025 23:28:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:09:a9:9d:31:77:eb:65:c9:f8:8b:99:22:0f:40:80:dd:53:a8:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=290C0689C5A4825DBE1353374A1CF148FF4180E8
        Validity
            Not Before: Jun  2 15:55:11 2025 GMT
            Not After : Jun  1 16:00:11 2026 GMT
        Subject: CN=5949F77E38F58323217935D96096D0003F325806
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:78:8d:e2:43:b9:52:c6:20:bd:15:77:c6:f9:
                    60:2f:d1:6d:7c:31:93:dc:f2:45:1c:47:47:4e:be:
                    9a:dc:7d:85:ae:ca:be:8c:71:c2:05:c7:af:ee:8a:
                    d1:03:54:49:75:bf:0f:45:af:5c:f9:a0:91:99:c9:
                    22:1c:53:5c:f8:5c:2b:9d:17:f7:67:94:5f:e3:7e:
                    43:93:1e:98:7f:f7:08:9a:a3:48:06:ad:33:40:bd:
                    0e:e6:98:dd:49:d4:8d:fb:03:cf:31:b3:ef:d4:88:
                    40:25:b6:16:cf:86:3a:e1:75:ec:bb:80:81:ce:d1:
                    7b:fe:be:53:5d:51:12:7c:a4:67:32:cc:40:75:4f:
                    31:b7:c8:63:82:5f:15:57:ad:a0:b1:d3:a8:90:82:
                    cf:eb:f8:32:30:b0:58:d9:5b:9f:b6:ee:e7:87:d8:
                    d5:66:a3:4b:9f:c5:ba:ec:c4:e7:1c:cd:80:c9:5b:
                    5c:56:0e:d9:a5:53:8e:3a:a2:41:df:26:b0:67:fe:
                    0f:df:d1:c2:d2:ee:fb:ce:95:0e:8d:1d:4d:28:f0:
                    83:09:a9:6b:96:f9:78:66:88:df:5d:bb:aa:f3:65:
                    11:d1:19:cf:8f:dd:49:04:87:ac:1f:80:f2:46:0a:
                    e4:31:ad:f6:cc:41:ff:d6:9a:4e:92:ae:73:e5:6c:
                    e6:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:49:F7:7E:38:F5:83:23:21:79:35:D9:60:96:D0:00:3F:32:58:06
            X509v3 Authority Key Identifier:
                keyid:29:0C:06:89:C5:A4:82:5D:BE:13:53:37:4A:1C:F1:48:FF:41:80:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/3134382e3232342e3139372e302f32342d3234203d3e20323733323631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.224.197.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:99:71:1a:d1:17:a5:28:a6:14:d0:1f:4b:dd:55:c9:32:78:
         c9:1f:5a:8a:db:e5:fd:b2:84:e0:9a:73:5d:60:67:80:a1:9e:
         b0:aa:7c:ce:cf:5d:a5:b4:e3:5a:69:6d:7c:86:21:5c:52:94:
         ef:66:c3:87:b8:13:51:a2:6d:7c:1e:cd:2a:63:63:22:24:5f:
         8e:dd:a4:a0:29:48:42:c9:86:75:28:07:52:c5:ee:2c:69:f5:
         d3:54:6b:29:32:19:e6:d2:83:cd:bd:d8:16:79:48:45:cd:ae:
         b3:7e:8a:5a:34:0c:5e:be:5a:6d:7b:6b:9f:9b:0c:e5:c1:ee:
         b3:a0:20:84:a7:4e:c9:8a:88:aa:20:a2:22:dd:d3:e8:db:79:
         47:da:de:5c:a4:49:06:2c:7e:0f:9e:70:94:75:3c:1f:2f:79:
         e4:0a:06:6a:eb:1e:bc:54:c4:77:8a:0a:8f:f9:59:69:13:6b:
         73:3f:da:6b:73:4b:b3:14:d1:11:e6:6d:62:34:4a:b6:41:d6:
         9d:98:2f:a0:54:4d:e0:23:1b:d5:d4:00:c5:14:27:e5:53:a0:
         d6:d5:79:99:dc:84:00:5b:79:95:fc:f5:32:7a:cc:0e:e3:45:
         be:d0:fc:26:d0:99:b3:1e:d1:47:67:61:1e:45:b3:96:12:d0:
         37:e6:0e:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 23:41:31 2025 by rpki-client